Tamper-proof elliptic encryption with private key
    21.
    发明授权
    Tamper-proof elliptic encryption with private key 有权
    具有私钥的防篡改椭圆加密

    公开(公告)号:US07536011B2

    公开(公告)日:2009-05-19

    申请号:US11045111

    申请日:2005-01-31

    IPC分类号: H04L9/00 H04L9/28 H04L9/30

    CPC分类号: G06F7/725 G06F2207/7223

    摘要: An encryption device performs elliptic curve encryption using a secret key. The encryption device includes an operation unit for performing scalar multiplication of a point on an elliptic curve a storage unit having a plurality of data storing areas and a determiner unit for determining, in accordance with a bit sequence of a given value (d) and with a random value (RNG), an address of one of the plurality of data storage areas that is to be coupled to the operation means for each scalar multiplication.

    摘要翻译: 加密装置使用密钥执行椭圆曲线加密。 加密装置包括用于执行椭圆曲线上的点的标量相乘的操作单元,具有多个数据存储区域的存储单元和确定单元,用于根据给定值(d)的位序列和与 随机值(RNG),用于每个标量乘法的要耦合到操作装置的多个数据存储区域之一的地址。

    Encryption secured against DPA
    22.
    发明授权
    Encryption secured against DPA 有权
    针对DPA的加密

    公开(公告)号:US07386130B2

    公开(公告)日:2008-06-10

    申请号:US10028265

    申请日:2001-12-28

    IPC分类号: H04L9/00 H04K1/00

    摘要: The encryption device includes a random number generator for generating a random number; and a first selector for selecting one of q fixed values in response to the random number, a second selector for selecting one set of q sets of fixed S-box tables in response to the random number. An XOR XORs an input with an XOR of a key with the fixed value. A nonlinear transform transforms an input nonlinearly in accordance with the selected set of fixed S-box tables. Another encryption device includes a plurality of encrypting units coupled in parallel, and a selector for selecting one of the plurality of encrypting units in response to the random number. The masking with the fixed values improves the processing speed and reduces the required RAM area.

    摘要翻译: 加密装置包括用于产生随机数的随机数发生器; 以及第一选择器,用于响应于所述随机数来选择q个固定值之一;第二选择器,用于响应于所述随机数来选择一组q个固定S盒表。 异或运算具有固定值的键的XOR的输入。 非线性变换根据所选择的固定S盒表组非线性地变换输入。 另一个加密装置包括并行耦合的多个加密单元和用于响应于该随机数来选择多个加密单元之一的选择器。 具有固定值的屏蔽可提高处理速度,并减少所需的RAM区域。

    Tamper-proof elliptic encryption with private key
    23.
    发明申请
    Tamper-proof elliptic encryption with private key 审中-公开
    具有私钥的防篡改椭圆加密

    公开(公告)号:US20070177721A1

    公开(公告)日:2007-08-02

    申请号:US11272916

    申请日:2005-11-15

    IPC分类号: H04L9/28

    摘要: An encryption device (10) for performing elliptic encryption processing with a private key, includes: randomizing means (16) for setting, into an initial elliptic point V0, an elliptic point R on an elliptic curve that is generated in accordance with a random value; operation means (20) for performing a first operation of summing the initial elliptic point V0 and a scalar multiple of a particular input elliptic point A on the elliptic curve, V1=V0+dA, in accordance with a bit sequence of a particular scalar value d for the elliptic encryption processing; de-randomizing means (22) for performing a second operation of subtracting the initial elliptic point V0 from the sum V1 determined by the first operation, V=V1−V0; and means (24) for providing, as an output, the elliptic point V determined by the de-randomization unit.

    摘要翻译: 一种用于利用私钥执行椭圆加密处理的加密装置(10),包括:随机化装置(16),用于将椭圆曲线R中的椭圆点R设置为椭圆曲线上的椭圆点R, 根据随机值生成; 操作装置(20),用于执行将初始椭圆点V 0 0和/或椭圆曲线V 1上的特定输入椭圆点A的标量倍相加的第一操作, 根据用于椭圆加密处理的特定标量值d的比特序列,V = 0&lt; 0&gt; + dA; 去随机化装置(22),用于执行从由第一操作确定的和V 1中减去初始椭圆点V 0 <0>的第二操作,V = V 1 0 以及用于提供由去随机化单元确定的椭圆点V作为输出的装置(24)。

    Extended key preparing apparatus, extended key preparing method, recording medium and computer program
    24.
    发明授权
    Extended key preparing apparatus, extended key preparing method, recording medium and computer program 失效
    扩展密钥准备装置,扩展密钥准备方法,记录介质和计算机程序

    公开(公告)号:US06956951B2

    公开(公告)日:2005-10-18

    申请号:US09811551

    申请日:2001-03-20

    IPC分类号: H04L9/06 H04L9/00

    CPC分类号: H04L9/0625 H04L2209/12

    摘要: Intermediate data ai, bi, ci, and di are prepared by an intermediate data preparing equipment 4 from a cryptographic key through a nonlinear type function operation and the like, an extended key preparing equipment 5 selects a [Xr], b [Yr], c [Zr], and d [Wr] corresponding to the number of stages r from the intermediate data, and rearranges the data as well as conducts that of bit operation to prepare extended keys, whereby an extended key preparing apparatus by which an extended key required in the case where common key cryptosystem is applied can be safely prepared at a high speed, a process for preparing such an extended key, and a recording medium used therefor are provided.

    摘要翻译: 中间数据准备设备(中间数据准备设备)通过中间数据准备设备来制备中间数据,中间数据和/ 通过非线性类型函数操作等从加密密钥4输出的数据,扩展密钥准备设备5选择[X,R],b [Y] Z&lt; r&gt;]和对应于来自中间数据的级数r的d [W SUB],并且重新排列数据,并且进行位操作以进行准备 扩展密钥,从而可以高速安全地准备应用公共密钥密码系统所需的扩展密钥的扩展密钥准备装置,用于制备这样的扩展密钥的处理及其使用的记录介质 。

    Device and method for calculating conversion parameter of montgomery modular multiplication and program therefor
    25.
    发明申请
    Device and method for calculating conversion parameter of montgomery modular multiplication and program therefor 有权
    用于计算montgomery模数乘法的转换参数的装置和方法及其程序

    公开(公告)号:US20060235921A1

    公开(公告)日:2006-10-19

    申请号:US11230592

    申请日:2005-09-21

    IPC分类号: G06F7/00

    CPC分类号: G06F7/728

    摘要: A method for calculating a conversion parameter of the Montgomery modular multiplication to improve the efficiency of software installation, comprising a first step for calculating H0=2v×R (mod n) (where v is an integer, v≧1, and (m×k)/v is an integer), a second step for calculating Hp=2v×2p×R (mod n) from H0=2v×R (mod n) by repeating Hi=REDC(Hi-1, Hi-1)n with respect to i=1, 2, . . . , p (where p represents an integer satisfying the condition 2p≧(m×k)/v>2p−1, REDC represents the Montgomery modular multiplication REDC(a, b)n=a×b×R−1 (mod n), and xˆi represents exponential computation xi); and a third step for calculating Hp=R2 (mod n) by calculating Hp=REDC(Hp, g)n with respect to Hp obtained in the second step when 2p>(m×k)/v (where g=2k×E(p,m,k), E(p, m, k)=2×m−(v×2p)/k) and finally outputting Hp as R2 (mod n).

    摘要翻译: 一种用于计算蒙哥马利模乘的转换参数以提高软件安装效率的方法,包括:计算第一步骤,用于计算H0 / (其中v是整数,v> = 1,并且(mxk)/ v是整数),用于计算H 2 p 2 = 2的第二步骤 -character-00001“he =”3.13mm“wi =”2.12mm“file =”US20060235921A1-20061019-P00900.TIF“alt =”custom character“img-content =”character“img-format =”tif“?> 通过重复H 1 = H(H(H)),H H 2(R 2) 相对于i = 1,2,...,i-1,H i-1,...,n)。 。 。 ,p(其中p表示满足条件2的整数p > =(mxk)/ v> 2 p-1,REDC表示蒙哥马利模乘乘法REDC(a, (mod n),xi表示指数计算,x i =&Sigma; 以及用于通过计算H H p = H 2 H(H p p)来计算H H p P 2 / R 2(mod n)的第三步骤, (mxk)/ v(其中g = 0),其中g = (p,m,k),E(p,m,k)= 2xm-(vx2

    )/ k),最后输出H p 作为R 2(mod n)。

    Management apparatus
    26.
    发明授权
    Management apparatus 有权
    管理装置

    公开(公告)号:US08205077B2

    公开(公告)日:2012-06-19

    申请号:US12363879

    申请日:2009-02-02

    IPC分类号: G06F21/00

    CPC分类号: G06F21/6209 G06F2221/2145

    摘要: A management apparatus comprising memory to store owner information, dependence relationship information, and authorized user information are associated with file information identifying the secret file, an authorized user determination unit to determine whether a source user of the browse request is registered as the authorized user of the browse request file, a dependent file specifying unit to specify a dependent file having a dependence relationship with the browse request file by referring to the dependence relationship information when the source user is authorized; and a browse permission response transmitting unit to transmit the browse permission response to the source user based on whether or not the source user is registered as the authorized user of the dependent file by referring to the authorized user information.

    摘要翻译: 包括存储所有者信息,依赖关系信息和授权用户信息的存储器的管理装置与识别秘密文件的文件信息相关联,授权用户确定单元确定浏览请求的源用户是否被注册为 所述浏览请求文件,依赖文件指定单元,用于通过在所述源用户被授权时参考所述依赖关系信息来指定与所述浏览请求文件具有依赖关系的依赖文件; 以及浏览许可响应发送单元,用于基于源用户是否通过参考授权的用户信息注册为依赖文件的授权用户来向源用户发送浏览许可响应。

    MANAGEMENT APPARATUS
    27.
    发明申请
    MANAGEMENT APPARATUS 有权
    管理装置

    公开(公告)号:US20090205029A1

    公开(公告)日:2009-08-13

    申请号:US12363879

    申请日:2009-02-02

    IPC分类号: H04L9/32

    CPC分类号: G06F21/6209 G06F2221/2145

    摘要: A management apparatus comprising memory to store owner information, dependence relationship information, and authorized user information are associated with file information identifying the secret file, an authorized user determination unit to determine whether a source user of the browse request is registered as the authorized user of the browse request file, a dependent file specifying unit to specify a dependent file having a dependence relationship with the browse request file by referring to the dependence relationship information when the source user is authorized; and a browse permission response transmitting unit to transmit the browse permission response to the source user based on whether or not the source user is registered as the authorized user of the dependent file by referring to the authorized user information.

    摘要翻译: 包括存储所有者信息,依赖关系信息和授权用户信息的存储器的管理装置与识别秘密文件的文件信息相关联,授权用户确定单元确定浏览请求的源用户是否被注册为 所述浏览请求文件,依赖文件指定单元,用于通过在所述源用户被授权时参考所述依赖关系信息来指定与所述浏览请求文件具有依赖关系的依赖文件; 以及浏览许可响应发送单元,用于基于源用户是否通过参考授权的用户信息注册为依赖文件的授权用户来向源用户发送浏览许可响应。

    Signature generating device and method, signature verifying device and method, and computer product
    28.
    发明授权
    Signature generating device and method, signature verifying device and method, and computer product 有权
    签名生成装置和方法,签名验证装置和方法以及计算机产品

    公开(公告)号:US08667302B2

    公开(公告)日:2014-03-04

    申请号:US12888553

    申请日:2010-09-23

    IPC分类号: G06F21/24

    摘要: A signature generating device includes a receiving unit that receives a sequence of data; a summary data generating unit that generates summary data of the data upon reception of each of the data by the receiving unit; an obtaining unit that obtains, when the number of data included in a sequence of the generated summary data reaches a given number, the sequence of the summary data as a block; a setting unit that sets, as a signature subject, a current block constituted by the sequence of the summary data, and the summary data selected from at least one block contiguous to the current block; a digital signature generating unit that generates a digital signature concerning data summarized for the current block; and a sending unit that sends the generated digital signature, the signature subject associated with the digital signature, and the data summarized for the current block.

    摘要翻译: 签名产生装置包括:接收单元,其接收数据序列; 汇总数据生成单元,其通过接收单元接收到每个数据时生成数据的汇总数据; 获取单元,当所生成的汇总数据的序列中包括的数据的数量达到给定的数量时,获得作为块的汇总数据的序列; 设置单元,其将签名对象设置为由所述汇总数据的序列构成的当前块以及从与所述当前块相邻的至少一个块中选择的汇总数据; 数字签名生成单元,生成关于当前块的总结的数据的数字签名; 以及发送单元,其发送生成的数字签名,与数字签名相关联的签名主体以及针对当前块总结的数据。

    Cryptographic processing method, computer readable storage medium, and cryptographic processing device
    29.
    发明授权
    Cryptographic processing method, computer readable storage medium, and cryptographic processing device 有权
    加密处理方法,计算机可读存储介质和密码处理装置

    公开(公告)号:US08638927B2

    公开(公告)日:2014-01-28

    申请号:US12886051

    申请日:2010-09-20

    IPC分类号: H04K1/00

    摘要: 401 stores, in 302, key d′ obtained by subtracting random number 2r held in 201 from key d held in 105. When an operation starts, the values “−C” and “−C2” are calculated respectively, and the resultant values are stored in a multiplication table memory 205 together with value “C”. In a first operation cycle, 107 selects and outputs an intermediate value 108 held in an in-operation data register 103, and thereby makes a modular-multiplication operation circuit 104 perform squaring. In the second operation cycle, 107 selects and outputs one of three values held in 205 in accordance with the combination of key bit value d′i and random number bit value ri, and thereby makes the modular-multiplication operation circuit 104 perform multiplication. Thereby, a cryptographic processing device that requires a short operation time period, small circuit scale, and has sufficient security can be realized.

    摘要翻译: 401在302中存储通过从保持在105中的密钥d减去在201中保留的随机数2r获得的密钥d'。当操作开始时,分别计算值“-C”和“-C2”,并且得到的值为 与值“C”一起存储在乘法表存储器205中。 在第一操作周期中,107选择并输出保持在工作数据寄存器103中的中间值108,从而使得乘法运算电路104进行平方。 在第二操作周期中,107根据密钥位值d i和随机数位值ri的组合来选择并输出保持在205中的三个值之一,从而使乘法运算电路104进行乘法运算。 因此,可以实现需要短操作时间段,小电路规模并且具有足够安全性的密码处理装置。

    Encryption apparatus having common key encryption function and embedded apparatus
    30.
    发明授权
    Encryption apparatus having common key encryption function and embedded apparatus 有权
    具有公共密钥加密功能的加密装置和嵌入式装置

    公开(公告)号:US08369516B2

    公开(公告)日:2013-02-05

    申请号:US12889096

    申请日:2010-09-23

    IPC分类号: G06F21/00

    摘要: A common key block encryption apparatus for performing a nonlinear transformation with a multiplication executed in a binary field or a composite field includes a computing unit to execute a computation other than the nonlinear transformation with fixed value masked input data obtained by XORing input data with a fixed mask value, an XOR operation circuit to transform all input data into fixed value masked input data by XORing the input data with a fixed mask value and to transform the data into random value masked input data by XORing the input data with a random mask value in the multiplication, a multiplier to execute a multiplication based on the random value masked input data output from the XOR operation circuit, and a random value mask-to-fixed mask value transformation circuit to again transform the random value masked output data into fixed value masked output data and to output the data.

    摘要翻译: 用于通过在二进制字段或复合字段中执行的乘法执行非线性变换的公共密钥块加密装置包括:计算单元,用于执行非线性变换以外的计算,该固定值掩码输入数据通过将具有固定值的输入数据进行异或 掩模值,XOR运算电路,通过用固定的掩码值对输入数据进行异或,将所有输入数据变换为固定值掩码输入数据,并通过将输入数据以随机掩码值进行异或来将数据变换为随机值屏蔽输入数据 乘法,乘法器,用于根据从异或运算电路输出的随机值屏蔽输入数据执行乘法,以及随机值掩码到固定掩码值变换电路,以将随机值屏蔽输出数据再次转换为固定值掩码 输出数据并输出数据。